This patch is against redhat 2.4.9 kernel and has already
been reported to redhat Bugzilla.

I suppose why such a serious bug has remained for a long time
is that the current debug code in slab.c fails to detect
double free in case the object holded by cpucaches is doubly
freed.
I think the current debug code should be improved to detect
this case.